You should back up the entire citadel/ directory. The most important files are citadel.config, citadel.control, and the data/ subdirectory, but there are other files which contain non-static data as well.